Description
Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.
References
- [oss-security] 20110322 CVE Request: libpng memory leak mailing-list
- [oss-security] 20110328 Re: CVE Request: libpng memory leak mailing-list
- https://bugs.gentoo.org/159216?id=159216
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18